Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,359
Erlang
33
GitHub Actions
22
Go
2,127
Maven
5,000+
npm
3,793
NuGet
683
pip
3,471
Pub
12
RubyGems
894
Rust
894
Swift
38
Unreviewed advisories
All unreviewed
5,000+

3,880 advisories

Loading
Missing Authorization vulnerability in Michael Revellin-Clerc Bulk Menu Edit allows Exploiting... High Unreviewed
CVE-2025-24692 was published Feb 14, 2025
Missing Authorization vulnerability in ashamil OPSI Israel Domestic Shipments allows Exploiting... Moderate Unreviewed
CVE-2025-23766 was published Feb 14, 2025
Missing Authorization vulnerability in Murali Push Notification for Post and BuddyPress allows... Moderate Unreviewed
CVE-2025-23771 was published Feb 14, 2025
Missing Authorization vulnerability in Northern Beaches Websites IdeaPush allows Exploiting... Moderate Unreviewed
CVE-2025-24607 was published Feb 14, 2025
Missing Authorization vulnerability in Mark Winiarski WPLingo allows Exploiting Incorrectly... Moderate Unreviewed
CVE-2025-23534 was published Feb 14, 2025
Missing Authorization vulnerability in monetagwp Monetag Official Plugin allows Exploiting... High Unreviewed
CVE-2024-52500 was published Feb 14, 2025
Missing Authorization vulnerability in Ability, Inc Accessibility Suite by Online ADA allows... Moderate Unreviewed
CVE-2025-22698 was published Feb 14, 2025
Missing Authorization vulnerability in EPC Photography. This issue affects Photography: from n/a... Moderate Unreviewed
CVE-2025-22702 was published Feb 14, 2025
The Read More & Accordion plugin for WordPress is vulnerable to unauthorized modification and... Moderate Unreviewed
CVE-2024-13639 was published Feb 13, 2025
A vulnerability classified as critical has been found in pihome-shc PiHome 2.0. This affects an... Moderate Unreviewed
CVE-2025-1214 was published Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less... High Unreviewed
CVE-2025-26368 was published Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less... Moderate Unreviewed
CVE-2025-26367 was published Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or... High Unreviewed
CVE-2025-26377 was published Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua (user endpoint) in Q-Free... Moderate Unreviewed
CVE-2025-26373 was published Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or... Moderate Unreviewed
CVE-2025-26376 was published Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less... High Unreviewed
CVE-2025-26371 was published Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less... High Unreviewed
CVE-2025-26372 was published Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua (users endpoint) in Q-Free... Moderate Unreviewed
CVE-2025-26374 was published Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less... High Unreviewed
CVE-2025-26369 was published Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or... High Unreviewed
CVE-2025-26378 was published Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less... High Unreviewed
CVE-2025-26370 was published Feb 12, 2025
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or... High Unreviewed
CVE-2025-26375 was published Feb 12, 2025
The Apus Framework plugin for WordPress is vulnerable to unauthorized modification of data that... High Unreviewed
CVE-2024-12296 was published Feb 12, 2025
The Click Mag - Viral WordPress News Magazine/Blog Theme theme for WordPress is vulnerable to... High Unreviewed
CVE-2024-13656 was published Feb 12, 2025
The ConvertPlus plugin for WordPress is vulnerable to unauthorized modification of data that can... High Unreviewed
CVE-2024-13800 was published Feb 12, 2025
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database